| Class | Description | 
|---|---|
| AccessDescription | 
 Provides access information used by the  authorityInfoAccessandsubjectInfoAccessextensions described in RFC 5280. | 
| AccessMethod | 
 Describes the type and format of extension access. | 
| ApiPassthrough | 
 Contains X.509 certificate information to be placed in an issued certificate. | 
| ASN1Subject | 
 Contains information about the certificate subject. | 
| CertificateAuthority | 
 Contains information about your private certificate authority (CA). | 
| CertificateAuthorityConfiguration | 
 Contains configuration information for your private certificate authority (CA). | 
| CreateCertificateAuthorityAuditReportRequest | |
| CreateCertificateAuthorityAuditReportResult | |
| CreateCertificateAuthorityRequest | |
| CreateCertificateAuthorityResult | |
| CreatePermissionRequest | |
| CreatePermissionResult | |
| CrlConfiguration | 
 Contains configuration information for a certificate revocation list (CRL). | 
| CrlDistributionPointExtensionConfiguration | 
 Contains configuration information for the default behavior of the CRL Distribution Point (CDP) extension in
 certificates issued by your CA. | 
| CsrExtensions | 
 Describes the certificate extensions to be added to the certificate signing request (CSR). | 
| CustomAttribute | 
 Defines the X.500 relative distinguished name (RDN). | 
| CustomExtension |  | 
| DeleteCertificateAuthorityRequest | |
| DeleteCertificateAuthorityResult | |
| DeletePermissionRequest | |
| DeletePermissionResult | |
| DeletePolicyRequest | |
| DeletePolicyResult | |
| DescribeCertificateAuthorityAuditReportRequest | |
| DescribeCertificateAuthorityAuditReportResult | |
| DescribeCertificateAuthorityRequest | |
| DescribeCertificateAuthorityResult | |
| EdiPartyName | 
 Describes an Electronic Data Interchange (EDI) entity as described in as defined in Subject Alternative Name in RFC 5280. | 
| ExtendedKeyUsage | 
 Specifies additional purposes for which the certified public key may be used other than basic purposes indicated in
 the  KeyUsageextension. | 
| Extensions | 
 Contains X.509 extension information for a certificate. | 
| GeneralName | 
 Describes an ASN.1 X.400  GeneralNameas defined in RFC 5280. | 
| GetCertificateAuthorityCertificateRequest | |
| GetCertificateAuthorityCertificateResult | |
| GetCertificateAuthorityCsrRequest | |
| GetCertificateAuthorityCsrResult | |
| GetCertificateRequest | |
| GetCertificateResult | |
| GetPolicyRequest | |
| GetPolicyResult | |
| ImportCertificateAuthorityCertificateRequest | |
| ImportCertificateAuthorityCertificateResult | |
| IssueCertificateRequest | |
| IssueCertificateResult | |
| KeyUsage | 
 Defines one or more purposes for which the key contained in the certificate can be used. | 
| ListCertificateAuthoritiesRequest | |
| ListCertificateAuthoritiesResult | |
| ListPermissionsRequest | |
| ListPermissionsResult | |
| ListTagsRequest | |
| ListTagsResult | |
| OcspConfiguration | 
 Contains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate
 revocation status. | 
| OtherName | 
 Defines a custom ASN.1 X.400  GeneralNameusing an object identifier (OID) and value. | 
| Permission | 
 Permissions designate which private CA actions can be performed by an Amazon Web Services service or entity. | 
| PolicyInformation | 
 Defines the X.509  CertificatePoliciesextension. | 
| PolicyQualifierInfo | 
 Modifies the  CertPolicyIdof aPolicyInformationobject with a qualifier. | 
| PutPolicyRequest | |
| PutPolicyResult | |
| Qualifier | 
 Defines a  PolicyInformationqualifier. | 
| RestoreCertificateAuthorityRequest | |
| RestoreCertificateAuthorityResult | |
| RevocationConfiguration | 
 Certificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions. | 
| RevokeCertificateRequest | |
| RevokeCertificateResult | |
| Tag | 
 Tags are labels that you can use to identify and organize your private CAs. | 
| TagCertificateAuthorityRequest | |
| TagCertificateAuthorityResult | |
| UntagCertificateAuthorityRequest | |
| UntagCertificateAuthorityResult | |
| UpdateCertificateAuthorityRequest | |
| UpdateCertificateAuthorityResult | |
| Validity | 
 Validity specifies the period of time during which a certificate is valid. | 
| Exception | Description | 
|---|---|
| AWSACMPCAException | Base exception for all service exceptions thrown by AWS Certificate Manager Private Certificate Authority | 
| CertificateMismatchException | 
 The certificate authority certificate you are importing does not comply with conditions specified in the certificate
 that signed it. | 
| ConcurrentModificationException | 
 A previous update to your private CA is still ongoing. | 
| InvalidArgsException | 
 One or more of the specified arguments was not valid. | 
| InvalidArnException | 
 The requested Amazon Resource Name (ARN) does not refer to an existing resource. | 
| InvalidNextTokenException | 
 The token specified in the  NextTokenargument is not valid. | 
| InvalidPolicyException | 
 The resource policy is invalid or is missing a required statement. | 
| InvalidRequestException | 
 The request action cannot be performed or is prohibited. | 
| InvalidStateException | 
 The state of the private CA does not allow this action to occur. | 
| InvalidTagException | 
 The tag associated with the CA is not valid. | 
| LimitExceededException | 
 An Amazon Web Services Private CA quota has been exceeded. | 
| LockoutPreventedException | 
 The current action was prevented because it would lock the caller out from performing subsequent actions. | 
| MalformedCertificateException | 
 One or more fields in the certificate are invalid. | 
| MalformedCSRException | 
 The certificate signing request is invalid. | 
| PermissionAlreadyExistsException | 
 The designated permission has already been given to the user. | 
| RequestAlreadyProcessedException | 
 Your request has already been completed. | 
| RequestFailedException | 
 The request has failed for an unspecified reason. | 
| RequestInProgressException | 
 Your request is already in progress. | 
| ResourceNotFoundException | 
 A resource such as a private CA, S3 bucket, certificate, audit report, or policy cannot be found. | 
| TooManyTagsException | 
 You can associate up to 50 tags with a private CA. |